Securing peer-to-peer networks using trusted computing

Trusted Computing

Volumn , Issue , 2005, Pages 271-298

  Balfe, Shane ^a   Lakhani, Amit D ^a   Paterson, Kenneth G ^a  

^a NONE

Author keywords

Computer network security; Peer to peer computing; Peer to peer network security; TCG compliant computing platforms; Trusted computing

Indexed keywords

COMPUTER NETWORKS; DISTRIBUTED COMPUTER SYSTEMS; PEER TO PEER NETWORKS; TRUSTED COMPUTING;

COMPUTING PARADIGM; COMPUTING PLATFORM; PEER TO PEER (P2P) NETWORK; PEER-TO-PEER COMPUTING; SECURITY FEATURES;

NETWORK SECURITY;

EID: 85013594843     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1049/PBPC006E_ch10     Document Type: Chapter

References (36)

1. D. S. Milojicic, V. Kalogeraki, R. Lukose, K. Nagaraja, J. Pruyne, B. Richard, S. Rollins, and Z. Xu. Peer-to-peer computing. Technical Report HPL-2002-57, HP Labs, March 2002. Available at http://www.hpl.hp.com/techreports/2002/HPL-2002-57.html
2. A. Oram, ed. Peer-to-Peer: Harnessing the Power of Disruptive Technologies. O’Reilly & Associates, Inc., 2001.
3. Trusted Computing Group. TCG software stack specificiation version 1.1, 2003. Available at https://www.trustedcomputinggroup.org/downloads/specifications
4. Trusted Computing Group. TCG specification architecture overview revision 1.2, 2004. Available at https://www.trustedcomputinggroup.org/downloads/specifications
5. T. Garfinkel, M. Rosenblum, and D. Boneh. Flexible OS support and applications for trusted computing. In Proceedings of the 9th USENIXWorkshop on Hot Topics in Operating Systems (HOTOS-IX), pp. 145-150, 2003.
6. M. Kinateder and S. Pearson.Aprivacy-enhanced peer-to-peer reputation system. In K. Bauknecht, A. M. Tjoa, and G. Quirchmayr, eds, Proceedings of EC-Web 2003, volume 2738 of Lecture Notes in Computer Science, pp. 206-216, Springer-Verlag, Berlin, 2003.
7. S. E. Schechter, R. A. Greenstadt, and M. D. Smith. Trusted computing, peer-to-peer distribution and the economics of pirated entertainment. In Proceedings of the Second Workshop on Economics and Information Security, May 2003.
8. J. Camenisch. Direct anonymous attestation: achieving privacy in remote authentication. Talk given at Zurich Information Security Colloquium. Available at http://www.zisc.ethz.ch/events/infseccolloquium2004
9. J. Kubiatowicz, D. Bindel, Y. Chen, S. Czerwinski, P. Eaton, D. Geels, R. Gummadi, S. Rhea, H. Weatherspoon, W. Weimer, C. Wells, and B. Zhao. Oceanstore: an architecture for global-scale persistent storage. In Proceedings of the 9th international Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2000), pp. 190-201, ACM Press, New York, November 2000.
10. S. Iyer, A. Rowstron, and P. Druschel. Squirrel: a decentralized peer-to-peer web cache. In Proceedings of the 21st Annual Symposium on Principles of Distributed Computing, pp. 213-222, ACM Press, New York, 2002.
11. M. Castro, P. Druschel, A. M. Kermarrec, and A. Rowstron. Scribe: a largescale and decentralised application-level multicast infrastructure. IEEE Journal on Selected Areas in Communications, 20(8):1489-1499, 2002.
12. N. Daswani, H. Garcia-Molina, and B. Yang. Open problems in data-sharing peer-to-peer systems. In D. Calvanese, M. Lenzerini, and R. Motwani, eds, Proceedings of the 9th International Conference on Database Theory (ICDT’03), volume 2572 of Lecture Notes in Computer Science, pp. 1-15, Springer-Verlag, Berlin, 2003.
13. D. S. Wallach. A survey of peer-to-peer security issues. In M. Okada, B. C. Pierce, A. Scedrov, H. Tokuda, and A. Yonezawa, eds, Proceeding of the International Symposium on Software Security - Theories and Systems (ISSS 2002), volume 2609 of Lecture Notes in Computer Science, pp. 42-57, Springer-Verlag, Berlin, 2003.
14. International Organisation for Standardization. Information processing systems -Open Systems Interconnection - Basic Reference Model - part 2: Security Architecture. ISO 7498-2, ISO, Geneva, 1989.
15. L. Detweiler. The snakes of medusa - internet identity subversion, 1993. Available at http://www.interesting-people.org/archives/interesting-people/199311/ms%g00054.html
16. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati, and F. Violante. A reputation-based approach for choosing reliable resources in peerto- peer networks. In V. Atluri, ed., Proceedings of the 9th ACM conference on Computer and Communications Security, pp. 207-216. ACM Press, New York, 2002.
17. J. R. Douceur. The Sybil attack. In P. Druschel, M. F. Kaashoek, and A. I. T. Rowstron, eds, Proceedings of the 1st InternationalWorkshop on Peer-to-Peer systems, (IPTPS 2002), volume 2429 of Lecture Notes in Computer Science, pp. 251-256, Springer-Verlag, Berlin, 2002.
18. A. Datta, M. Hauswirth, and K. Aberer. Beyond ‘web of trust’: enabling P2P e-commerce. In Proceedings of the IEEE Conference on Electronic Commerce (CEC’03), pp. 303-312, IEEE Computer Society Press, Los Alamites, CA, June 2003.
19. P. Resnick, K. Kuwabara, R. Zeckhauser, and E. Friedman. Reputation systems. Communications of the ACM, 43(12):45-48, 2000.
20. P. Zimmermann. PGP Source Code and Internals. MIT Press, Cambridge, MA, 1995.
21. R. Dingledine, M. J. Freedman, and D. Molnar. Accountability. In A Oram, ed., Peer-to-peer: Harnessing the Power of Disruptive Technologies In [2], pp. 171-213, O. Relly & Associates, Inc., 2001.
22. D. Molnar, R. Dingledine, and M. J. Freedman. Free haven. In Oram ed., Peer-topeer: Harnessing the Power of Disruptive Technologies, pp. 102-120, O. Reilly & Associates, Inc., 2001.
23. I. Clarke, O. Sandberg, B. Wiley, and T. W. Hong. Freenet: a distributed anonymous information storage and retrieval system. In H. Federrath, ed., Proceedings of the International Workshop on Design Issues in Anonymity and Unobservability, volume 2009 of Lecture Notes in Computer Science, pp. 46-66, Springer-Verlag, Berlin, 2001.
24. S. Marti and H. Garcia-Molina. Identity crisis: anonymity vs. reputation in P2P systems. In Proceedings of the 3rd International Conference on Peer-to-Peer Computing, pp. 134-141, IEEE Computer Society Press, Los Alamitos, CA, September 2003.
25. D. L. Chaum. Untraceable electronic mail, return addresses, and digital pseudonyms. Communications of the ACM, 24(2):84-88, 1981.
26. M. Rennhard and B. Plattner. Practical anonymity for the masses with Mixnetworks. In Proceedings of the IEEE 8th International Workshop on Enterprise Security (WETICE’03), pp. 255-260, IEEE Computer Society Press, Los Alamitos, CA, June 2003.
27. M. K. Reiter and A. D. Rubin. Crowds: anonymity for web transactions. ACM Transactions on Information and System Security, 1(1):66-92, 1998.
28. P. F. Syverson, D. M. Goldschlag, and M. G. Reed. Anonymous connections and onion routing. In Proceedings of IEEE Symposium on Security and Privacy, pp. 44-54, IEEE Press, New York, 1997.
29. P. Fenkam, S. Dustdar, E. Kirda, H. Gall, and G. Reif. Towards an access control system for mobile peer-to-peer collaborative environments. In Proceedings of the IEEE 11th InternationalWorkshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE 2002), pp. 95-101, IEEE Computer Society Press, Los Alamitos, CA, June 2002.
30. L. Chen, E. Brickell, and J. Camenisch. Direct anonymous attestation. In V. Atluri, B. Pfitzmann, and P. McDaniel, eds, Proceedings of the 11th ACM Conference on Computer and Communications Security, (CCS 2004), October 2004.
31. J. Camenisch and A. Lysyanskaya. A signature scheme with efficient protocols. In S. Cimato, C. Galdi, and G. Persiano, eds, Proceedings of the 3rd International Conference on Security in Communication Networks, (SCN 2002), volume 2576 of Lecture Notes in Computer Science, pp. 268-289. Springer-Verlag, Berlin, 2003.
32. T. Dierks and C. Allen. Request for Comments 2246 - The TLS Protocol Version 1.0, January 1999.
33. D. Harkins and D. Carrel. Request for Comments 2409 - The Internet Key Exchange (IKE), November 1998.
34. Trusted Computing Group. TPM main: part 3 commands, 2003. Available at https://www.trustedcomputinggroup.org/downloads/specifications
35. Trusted Computing Group. TPM main: part 1 design principles, 2003. Available at https://www.trustedcomputinggroup.org/downloads/specifications
36. N. Daswani, P. Golle, S. Marti, H. Garcia-Molina, and D. Boneh. Evaluating reputation systems for document authenticity. Technical Report, Computer Science Department, Stanford University, 2003.